QwikSec

Security Database

CVE

CWE

Training

CVE-2006-4994

Published: Sep 26, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute (1) FileZillaServer.exe, (2) mysqld-nt.exe, (3) Perl.exe, or (4) xamppcontrol.exe with an unquoted "Program Files" pathname.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20060521 [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostarthttp

mailing-list

x_refsource_FULLDISC

http://secdev.zoller.lu/research/xamp1.htm

x_refsource_MISC

20060521 [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart

mailing-list

x_refsource_BUGTRAQ

xampp-insecure-start-path(26581)

vdb-entry

x_refsource_XF

http://www.apachefriends.org/en/news-article%2C75557.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.